Services

Everything that belongs to a domain, from one house.

DNS is the core. Around it sits what a domain actually needs to work — certificates, mail, hosting, monitoring — all of it built and operated by CertThor PlatForms Ltd.

Authoritative DNS

The core service.

Primary

Managed DNS

Your zone lives on our primary and is answered by all four nameservers. You manage it in the panel or over the API; we keep the infrastructure under it.

Available
Secondary

Secondary DNS

Keep your primary where it is and let our nameservers carry the zone as secondaries — transferred by AXFR and kept current by NOTIFY.

Available
Reverse

Reverse DNS

PTR zones for IPv4 and IPv6 ranges you control, managed beside your forward zones. Needs the range delegated to our nameservers.

Available
Dynamic

Dynamic DNS

A token-protected update address for hosts whose IP changes, so a home office or a mobile gateway keeps a stable name.

Planned
Branded

Your own nameserver names

Answer under your own brand — ns1.yourdomain.tld and ns2.yourdomain.tld pointing at our machines, with the glue records set for you.

On request
Signed

DNSSEC

Zone signing with DS records published at the registrar. Being rolled out: a domain is signed once its move to CTPFDNS is complete.

Rolling out

Resilience

Answering under load and under attack.

Stated as it is: what runs today, and what is on the roadmap.

Spread

Four locations

Frankfurt, Amsterdam, London and Los Angeles. Every one of them holds the complete zone, so three can fail and the domain still resolves.

Available
Anycast

Anycast addressing

One address answered from the nearest location. Our spread today is unicast per site; anycast is on the roadmap, not in place.

Roadmap
Filtered

Attack filtering

Query floods and abusive sources are filtered in front of the nameservers by the same PowerFirewall that protects the rest of the platform.

CDPGuard
Geo

GeoDNS

Different answers by the origin of the query, for splitting traffic between regions.

On request
Failover

DNS failover

A monitored target that is taken out of the answer when it stops responding, driven by the checks from UptimeRobot.org.

Planned
SLA

Enterprise terms

Named contacts, agreed response times and a written service level for businesses that need one.

On request

Around the domain

The rest of what a domain needs.

Domains

Registration and transfer

Domain registration and transfers are being set up as their own service under cdpdomain.com, so registration, DNS and hosting sit in one place.

cdpdomain.com — in preparation
TLS

Certificates

Issuance and renewal handled by ControlDeskPanel, with the CAA record for your domain set at the same time.

Available
Mail

Mail and forwarding

Mailboxes, aliases, forwarding and webmail — with SPF, DKIM and DMARC published in the same zone and verified.

Available
Hosting

Web hosting

Vhost, PHP pool, TLS, HSTS and HTTP/3 on our own servers, managed in the same panel as the zone.

Available
Monitoring

Uptime monitoring

Availability checked from outside, with status pages you can publish. Run on our own monitoring service.

uptimerobot.org
Move

Migration

Zone exported from your current provider, rebuilt here, compared record by record, and only then delegated. Nothing is switched blind.

Included

How a move runs

Six steps, always in this order.

The delegation is the last step, never the first. That is the only way a domain never goes dark during a move.

  1. Zone at CTPFDNSThe domain is created here and every record is entered and checked.
  2. VhostWeb and mail hosts are prepared so the names actually answer.
  3. Switch at the registrarOnly now the delegation moves to our four nameservers.
  4. CertificateTLS is issued once the name resolves to us.
  5. HSTSStrict transport security is switched on after the certificate is live.
  6. HTTP/3Last step, once everything before it is verified.

Plans

Four plans, and the small one is free.

Every plan answers from all four nameservers and carries the same record standard. What grows is the volume, the protection and how clever the answer may be.

Free DNS

Free forever
  • 4 authoritative nameservers
  • 1 zone, 50 records
  • 500,000 queries per month
  • 1 mail forward
  • 1 dynamic DNS host
  • The CTPF record standard applied
  • Zone editor and all checks
Start free

Protected DNS

Starting from: €5.95 per month
  • Everything in Managed
  • Attack filtering in front of every nameserver
  • Higher query volume
  • DNS failover with health checks
  • Reverse DNS for your address ranges
  • Private nameservers on your own domain
  • Service level as written down
Talk to us

GeoDNS

Starting from: €9.95 per month
  • Everything in Protected
  • Answers by region
  • EDNS client subnet support
  • Weighted answers per record
  • Several failover targets per region
  • One flat price, no overbilling
  • Enterprise terms on request
Talk to us

Free zone migration with no limit on the number of zones — works with standard zone files. Prices exclude VAT.

Serving a single continent? The regional bundles group the twelve locations into America, Asia Pacific and Europe.

Not sure which of these you need?

Tell us the domain and what it does today. We will say what we would change and what we would leave alone.

Talk to us